This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/STN4bdrkl_YDGWwd5JCdu_Z84Pc.roa File: STN4bdrkl_YDGWwd5JCdu_Z84Pc.roa (raw, json) Hash identifier: Gb31UnfXmOSYeiOedmM5BYaTEZl9dUUluUrhCjeeCRE= Subject key identifier: 49:33:78:6D:DA:E4:97:F6:03:19:6C:1D:E4:90:9D:BB:F6:7C:E0:F7 Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Certificate serial: 019B78A3637C20E6094ECC0121A440BF804A Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/STN4bdrkl_YDGWwd5JCdu_Z84Pc.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198760 IP address blocks: 37.221.232.0/21 maxlen: 24 45.157.216.0/22 maxlen: 24 81.172.80.0/21 maxlen: 24 87.236.162.0/24 maxlen: 24 89.21.68.0/22 maxlen: 24 157.97.80.0/22 maxlen: 24 185.25.24.0/22 maxlen: 24 185.163.252.0/22 maxlen: 24 185.208.116.0/22 maxlen: 24 185.228.116.0/22 maxlen: 24 185.236.116.0/22 maxlen: 24 185.241.88.0/22 maxlen: 24 193.254.32.0/20 maxlen: 24 2a04:c80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:63:7c:20:e6:09:4e:cc:01:21:a4:40:bf:80:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4933786ddae497f603196c1de4909dbbf67ce0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c0:a4:82:2c:93:a6:2f:98:f9:8f:c8:12:43: 09:c1:fd:b7:ea:c9:43:72:bf:47:79:4b:bb:c9:6d: 14:f2:f8:b0:45:24:5d:33:2c:d5:d6:18:b9:d0:0d: 0a:53:90:02:05:44:c9:6c:cc:da:86:1e:57:97:f9: 85:5a:fc:8a:15:cf:32:44:cd:b1:a3:ad:71:e3:ba: 8f:5d:a1:fe:d5:8d:c8:49:8c:ef:3a:d4:73:d7:35: 3a:60:bd:18:d8:20:72:99:a7:e3:2b:0a:22:cd:0b: 66:5e:3d:74:71:e2:ab:7a:70:9a:ed:d0:f9:3c:7c: bf:09:1c:7f:98:13:1a:7a:3a:c1:7a:27:c7:46:8c: ee:8f:fa:00:c7:f9:19:4c:71:94:aa:5a:25:f3:03: e0:01:b6:61:e7:b0:bc:22:ee:03:3e:32:8c:67:f8: 2a:77:70:81:8c:50:10:47:5b:4e:de:7d:8d:d8:6b: e2:59:a7:30:ca:d9:a7:03:0d:ef:0e:6c:08:c3:fb: 41:83:40:95:1c:ef:00:41:80:ac:1f:c3:0d:f2:3b: 09:2a:bc:2a:5b:08:28:b3:4d:a5:e8:79:fb:b3:47: ac:7e:51:f2:43:5c:05:17:34:7c:22:d9:9a:b2:6b: 2c:8e:c5:19:83:24:c3:63:c2:8e:3c:bd:34:fe:e5: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:33:78:6D:DA:E4:97:F6:03:19:6C:1D:E4:90:9D:BB:F6:7C:E0:F7 X509v3 Authority Key Identifier: keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/STN4bdrkl_YDGWwd5JCdu_Z84Pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.232.0/21 45.157.216.0/22 81.172.80.0/21 87.236.162.0/24 89.21.68.0/22 157.97.80.0/22 185.25.24.0/22 185.163.252.0/22 185.208.116.0/22 185.228.116.0/22 185.236.116.0/22 185.241.88.0/22 193.254.32.0/20 IPv6: 2a04:c80::/29 Signature Algorithm: sha256WithRSAEncryption 92:21:73:67:4f:5b:df:33:28:70:9f:45:50:5c:22:e0:7a:06: fb:0e:b6:29:43:22:63:ab:75:91:53:49:ec:86:42:f4:d0:ec: 68:46:cf:fd:bf:3c:d5:7f:c8:64:97:e4:99:80:5f:8f:21:3c: b2:3f:0b:97:70:63:4d:b8:1e:2e:7c:28:1f:04:07:98:ec:2d: 16:3c:35:7c:11:8d:f0:8d:d5:5f:39:af:43:bd:ca:e1:af:7b: bb:b4:3b:ff:86:8d:72:f4:52:54:04:10:ff:16:60:fd:a0:f4: 29:2e:08:63:21:16:11:65:2b:0f:32:df:81:4c:40:df:4e:29: e5:81:d8:5a:c0:82:58:bf:e7:f4:7e:54:a9:ce:30:6b:c3:dc: 3c:42:72:4c:64:4c:57:d0:33:c2:67:e2:4d:5b:a1:e0:e5:bb: 48:7d:2b:9e:f0:57:d2:ba:56:72:e4:0e:2c:4b:1f:50:b5:32: f5:cc:48:6b:14:85:97:49:68:28:de:bc:56:ee:38:1f:90:0f: a5:eb:2d:c0:40:28:ae:7e:75:55:6c:63:c7:96:9c:35:06:b2: ec:76:2c:5c:2b:fe:de:1e:55:e7:51:40:a9:04:ff:7b:e3:19: 5a:b9:cd:cf:34:e2:33:10:92:e9:b3:67:9e:6e:7a:a9:4a:c7: 4f:9c:db:1c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZt4o2N8IOYJTswBIaRAv4BKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTRlYTNjZWQ0ZjEzNzEwZDM0MDQ0Y2ZjYjNkMWQ1NmM1 NTA4NjIwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTMzNzg2ZGRhZTQ5N2Y2MDMxOTZjMWRlNDkwOWRiYmY2N2NlMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sCkgiyTpi+Y+Y/IEkMJwf236slD cr9HeUu7yW0U8viwRSRdMyzV1hi50A0KU5ACBUTJbMzahh5Xl/mFWvyKFc8yRM2x o61x47qPXaH+1Y3ISYzvOtRz1zU6YL0Y2CBymafjKwoizQtmXj10ceKrenCa7dD5 PHy/CRx/mBMaejrBeifHRozuj/oAx/kZTHGUqlol8wPgAbZh57C8Iu4DPjKMZ/gq d3CBjFAQR1tO3n2N2GviWacwytmnAw3vDmwIw/tBg0CVHO8AQYCsH8MN8jsJKrwq Wwgos02l6Hn7s0esflHyQ1wFFzR8ItmasmssjsUZgyTDY8KOPL00/uWXPQIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFEkzeG3a5Jf2AxlsHeSQnbv2fOD3MB8GA1UdIwQY MBaAFIGU6jztTxNxDTQETPyz0dVsVQhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDIt MjM3MjRiYWIyMjI3LzEvU1RONGJkcmtsX1lER1d3ZDVKQ2R1X1o4NFBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDItMjM3MjRiYWIyMjI3 LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQDJd3oAwQC LZ3YAwQDUaxQAwQAV+yiAwQCWRVEAwQCnWFQAwQCuRkYAwQCuaP8AwQCudB0AwQC ueR0AwQCuex0AwQCufFYAwQEwf4gMA0EAgACMAcDBQMqBAyAMA0GCSqGSIb3DQEB CwUAA4IBAQCSIXNnT1vfMyhwn0VQXCLgegb7DrYpQyJjq3WRU0nshkL00OxoRs/9 vzzVf8hkl+SZgF+PITyyPwuXcGNNuB4ufCgfBAeY7C0WPDV8EY3wjdVfOa9Dvcrh r3u7tDv/ho1y9FJUBBD/FmD9oPQpLghjIRYRZSsPMt+BTEDfTinlgdhawIJYv+f0 flSpzjBrw9w8QnJMZExX0DPCZ+JNW6Hg5btIfSue8FfSulZy5A4sSx9QtTL1zEhr FIWXSWgo3rxW7jgfkA+l6y3AQCiufnVVbGPHlpw1BrLsdixcK/7eHlXnUUCpBP97 4xlauc3PNOIzEJLps2eebnqpSsdPnNsc -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:33 2026 by rpki-client